Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231382e302f32342d3234203d3e203330303331.roa
File:                     3231362e3134352e3231382e302f32342d3234203d3e203330303331.roa (raw, json)
Hash identifier:          Utpzi8jRmslA6UQL8BQTePTLsBRn2tvOJA7BbiuJZ3o=
Subject key identifier:   11:27:78:52:55:29:9A:45:2C:C7:E6:BE:BF:18:5F:C8:D4:28:CB:DB
Certificate issuer:       /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial:       3CC410C38EF6C483BDAFF3D3B4CDF07524164699
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231382e302f32342d3234203d3e203330303331.roa
Signing time:             Fri 01 Sep 2023 11:14:27 +0000
ROA not before:           Fri 01 Sep 2023 11:09:27 +0000
ROA not after:            Fri 30 Aug 2024 11:14:27 +0000
asID:                     30031
IP address blocks:        216.145.218.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 May 2024 14:13:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:c4:10:c3:8e:f6:c4:83:bd:af:f3:d3:b4:cd:f0:75:24:16:46:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
        Validity
            Not Before: Sep  1 11:09:27 2023 GMT
            Not After : Aug 30 11:14:27 2024 GMT
        Subject: CN=1127785255299A452CC7E6BEBF185FC8D428CBDB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:11:94:f2:36:66:2d:1c:28:47:70:75:c9:6a:
                    e3:7a:be:9f:a7:c3:2a:a9:a4:05:6f:1b:94:cc:c4:
                    21:05:40:6d:a1:81:69:71:9d:53:f7:c3:04:f0:10:
                    8c:e1:cc:dd:ab:11:10:a0:08:33:af:d9:7e:de:de:
                    6a:a9:75:b8:f1:3e:cd:94:bb:09:5a:fd:ea:f3:01:
                    19:3f:23:23:a9:3f:91:57:7e:a0:a1:45:45:53:33:
                    a1:b7:ae:04:d3:20:af:a7:68:df:26:f0:c1:d0:fe:
                    e4:b8:40:7e:1a:a5:af:d6:68:6d:15:cf:bf:c2:c2:
                    fd:21:e6:ed:4c:f1:90:64:f6:a1:6b:2c:2a:b6:c2:
                    b3:ac:01:23:e9:4a:5c:a0:c8:79:09:6f:f2:cc:7b:
                    1a:60:40:3a:83:89:f2:bb:94:4e:43:a5:b3:8b:45:
                    80:50:80:f6:1e:4a:66:92:b6:a2:ea:af:60:28:ec:
                    82:ab:37:c9:5f:ad:a7:bf:98:15:bc:ae:81:51:4f:
                    ee:8a:c3:d9:1c:41:bf:08:b7:06:9e:91:ab:8d:5c:
                    6e:95:b4:d4:f6:12:88:c8:7b:c0:ba:86:54:7d:26:
                    53:32:2d:9e:c6:77:db:d0:bf:43:6c:0c:f0:d8:96:
                    37:d8:14:c2:34:0b:01:7d:12:d3:30:97:e5:c6:3a:
                    b8:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:27:78:52:55:29:9A:45:2C:C7:E6:BE:BF:18:5F:C8:D4:28:CB:DB
            X509v3 Authority Key Identifier:
                keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231382e302f32342d3234203d3e203330303331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.145.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:43:8d:27:a1:e6:b0:8d:08:44:cb:2f:11:9e:9c:8e:0b:b9:
         78:c9:df:de:e8:a2:04:46:2a:6e:8b:ba:45:77:4b:b7:30:75:
         29:ff:89:79:fe:d7:97:a6:48:b4:a5:e1:0a:3e:ea:00:ff:23:
         4a:22:af:c2:d7:52:08:13:24:89:2c:97:65:90:0b:93:f8:11:
         2c:05:4a:c3:0b:4f:f9:96:0e:98:ef:57:64:14:82:60:db:7c:
         88:a5:f8:21:80:7b:98:47:72:76:cd:be:30:73:97:9f:c5:fb:
         d7:11:9a:7d:74:b2:17:e1:cf:a9:f7:1e:74:89:b0:19:bd:95:
         a7:64:49:3b:be:1c:d0:7b:de:fa:f8:cd:47:f7:6d:c9:48:0a:
         a1:a6:cf:93:05:6e:25:76:36:db:59:e5:66:84:59:09:e1:e1:
         97:36:7a:42:16:37:31:a3:ce:47:17:82:af:7d:51:c2:43:c8:
         4b:91:03:29:18:fa:16:0b:5d:97:b5:2b:cb:ae:57:99:3f:20:
         8c:e6:9a:a6:96:7e:49:c0:30:d9:d2:15:e9:b1:9a:2d:92:a4:
         4c:62:4a:4c:3c:e0:9f:dd:f9:7b:36:be:59:28:da:47:e2:3d:
         0b:ec:ce:1c:12:b1:4a:1e:13:f2:3f:8f:cd:18:38:4d:6c:02:
         be:58:9b:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 16:41:33 2024 by rpki-client on console-ams.rpki-client.org